Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
File: NIg6t5nxQCjltTdQbir4eESQQcU.mft (raw, json)
Hash identifier: eui9oQ7j+4zYJDloIv1oJlbBrGZtC391H5PB4smDSBI=
Subject key identifier: 36:4B:E9:97:7D:1E:E7:7D:8B:2D:8A:2C:57:71:98:30:BC:9E:4D:44
Authority key identifier: 34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5
Certificate issuer: /CN=34883ab799f14028e5b537506e2af878449041c5
Certificate serial: 0198D65F1A6658D4C24E70544711C1E6B3B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
Manifest number: 0518
Signing time: Sat 23 Aug 2025 10:00:13 +0000
Manifest this update: Sat 23 Aug 2025 10:00:13 +0000
Manifest next update: Sun 24 Aug 2025 10:00:13 +0000
Files and hashes: 1: NIg6t5nxQCjltTdQbir4eESQQcU.crl (hash: 7USyL2LCPcwpe4TXOPlj1TXW7Pk8o5FUz1EZeExnimQ=)
2: aOjf7ha4NpM1xf113RLoBKrWwUY.roa (hash: hUQXGx10+6VeL01cd/7kpuKBjZges7kH8YJzcunm/rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:1a:66:58:d4:c2:4e:70:54:47:11:c1:e6:b3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34883ab799f14028e5b537506e2af878449041c5
Validity
Not Before: Aug 23 10:00:13 2025 GMT
Not After : Aug 24 10:00:13 2025 GMT
Subject: CN=364be9977d1ee77d8b2d8a2c57719830bc9e4d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c2:fe:3d:51:ef:12:c3:52:c3:15:5c:d8:af:
78:a0:3c:4f:70:2d:09:cb:16:3c:80:e5:a0:0d:15:
f2:a2:9d:50:fa:9b:a3:5a:7b:64:d9:55:89:67:f1:
6a:d8:20:b6:ae:3f:d1:b9:0a:c8:2c:c8:7c:ba:24:
e6:1f:a7:97:67:fd:45:11:13:a1:43:67:d7:87:9a:
60:d8:2d:b9:2a:2a:d1:20:71:71:fd:05:2a:96:21:
27:48:ab:b0:f8:5f:12:cc:79:11:e8:f8:c9:70:40:
f8:94:05:8b:b6:dd:e1:e8:9a:65:55:97:15:9e:aa:
a2:b7:92:83:12:c4:f5:05:fc:ae:66:65:5a:4f:9b:
4d:d1:38:22:43:ff:ff:d0:f8:16:69:28:f6:97:2c:
e2:28:0f:90:1d:83:ba:0a:4f:93:2a:e3:f1:76:03:
84:d9:f2:61:77:07:6a:64:89:f6:22:0a:1b:d3:3a:
b7:76:6e:86:c5:e5:98:30:77:00:f8:b6:3d:b7:92:
cb:b9:68:0e:38:96:3c:f4:00:2c:f6:bf:c9:de:bc:
a8:79:af:49:20:4f:d8:b6:90:4e:bb:15:a1:9a:44:
72:73:1c:47:fc:c8:7f:6a:b8:f7:b7:0a:66:1b:d8:
5b:b7:f0:d3:28:aa:4d:e4:9e:88:a7:25:ea:09:27:
a7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4B:E9:97:7D:1E:E7:7D:8B:2D:8A:2C:57:71:98:30:BC:9E:4D:44
X509v3 Authority Key Identifier:
keyid:34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:0f:6b:4e:a2:85:38:38:80:c3:70:61:d9:40:86:0f:1f:76:
27:8c:ab:a5:31:62:7b:90:ad:8d:3b:86:e9:ee:b1:28:81:f8:
14:3f:d1:33:24:03:1c:09:25:5e:3b:4d:e7:24:2b:5b:4e:ec:
b0:38:7d:20:4f:7d:2e:fe:68:1a:05:8a:dd:57:7a:fd:07:91:
e0:07:95:91:1c:b8:17:16:32:78:4b:2b:e9:be:97:75:44:07:
70:27:df:3e:63:60:f4:83:21:a3:ac:8b:5f:1b:26:d7:10:52:
55:a6:d2:d6:c4:fc:4d:7b:33:b4:c6:23:53:5e:ac:50:bf:69:
59:7f:f5:95:cb:b9:cc:9e:d5:a8:ba:70:6a:5b:36:ad:7c:4c:
3a:6b:0d:f3:a5:6a:b0:ee:12:a7:e9:8f:09:18:9a:23:d3:76:
60:ab:48:2d:5c:4f:c6:8a:8b:fe:c8:35:e7:f2:c6:0d:aa:fb:
26:fe:9a:f7:d6:cd:a2:ad:91:63:3f:d2:be:7b:c3:ad:cb:cc:
2b:71:82:f7:da:15:5f:95:ab:37:10:28:f9:a4:fe:97:f1:74:
c0:aa:f3:dc:00:38:a3:22:ad:24:84:a2:83:fd:ad:0c:ba:4b:
d8:eb:07:da:89:3f:49:55:97:d9:7d:90:4f:ff:8c:97:8d:82:
91:fc:46:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:28:03 2025 by rpki-client